Mend.io Blog

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install

Tom Abai Mar 31, 2026

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Filter & Search

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog cover poisoned axios

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog cover team pcp part 3

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog cover team pcp attack v2

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026

Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog cover canisterworm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - cursor incident

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Tiffany Jennings Mar 20, 2026

AI Models Risk

Cursor’s Composer 2 identified as Moonshot’s Kimi K2.5 exposing an AI governance gap.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog mend partnership expansion 1000x650

Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India

Stephanie Broyles Mar 19, 2026

Application Security

Local cloud infrastructure in India for data residency requirements.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog ai driven project classification

Introducing AI-powered Contextual Project Classification: From severity scores to business risk

Tiffany Jennings Mar 17, 2026

AI Models Risk

Find your most sensitive code and prioritize fixes.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - system prompt weakness detection blog post

Introducing System Prompt Hardening: production-ready protection for system prompts

Tiffany Jennings Mar 10, 2026

AI Models Risk

Secure your AI applications with system prompt hardening.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog ai compliance

AI Compliance: 5 Key Frameworks, Challenges, and Best Practices

Tiffany Jennings Mar 3, 2026

AI Models Risk

Discover how to manage bias, privacy, and shadow AI risks.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog ai risk management

AI Risk Management: Process, Frameworks, and 5 Mitigation Methods

Tiffany Jennings Feb 26, 2026

AI Models Risk

Learn how to identify, assess, and mitigate AI risks.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog claude code security

Why Claude Code Security Is a Big Moment for Application Security

Stephanie Broyles Feb 23, 2026

Application Security

Discover why enterprise scale requires more than just AI code review - it requires governance.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog best software composition analysis providers

Best Software Composition Analysis Providers: Top 5 in 2026

Tiffany Jennings Feb 19, 2026

Software Composition Analysis

Explore key features of leading SCA providers.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog image agent configuration scanning

Securing the New Control Plane: Introducing Static Scanning for AI Agent Configurations

Jeff Martin Feb 17, 2026

AI Models Risk

Announcing the launch of AI Agent Configuration Scanning.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog ai security testing

AI Security Testing: Threats, Approaches, and Defenses in 2026

Tiffany Jennings Feb 12, 2026

AI Models Risk

Explore AI security testing methods.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog cover open source security with ai

You can’t rely on open source for security — not even when AI is involved

Jeff Martin Feb 6, 2026

Application Security

Learn how to manage OSS risk and build remediation that actually lands.

Poisoned axios: npm account takeover, 50 million downloads, and a rat that vanishes after install - blog top 10 open source vulnerabilities

Top Open Source Vulnerabilities In 2026

Tiffany Jennings Feb 3, 2026

Open Source Security

Discover the top open source vulnerabilities in 2026.

1 2 3 4 ... 36

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report